General
- Target 2026-06-04_d73ae7425eef92dd7c02b0aa2db6f2f0_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat_rhadamanthys
- Size 1.6MB
- Sample260604-zh2ryaes6t
- SHA256 1709520fe8847066df1494fbd7bcf866a29b62fd7fc3800309231dce1b3feea5
- MD5 d73ae7425eef92dd7c02b0aa2db6f2f0
- SHA1 7042cd591c890400deff95023019f5a06a3c1d50
- SHA512 9b6e42b28faa192a7cc2466390a7067c629d2f55edc4fc71abe837505bdc7e7e49860e81097c1a1c6b2b567bedc1479ad5fc6aebdb1337091d743ee8857295c9
- SSDEEP 24576:qg8x+aIwBnuDCaGqEpkHGMXNk7DFO8HbkfFVEQa8EBb6pPtfmiuWXW:P8JuOkHGMXNoFO8Hk3Ezb6pPtfqiW
- TLSH T14275181177E95A29F5FB2B31AEB851604A7BBC615F31C7CF13801A5E2934AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_d73ae7425eef92dd7c02b0aa2db6f2f0_amadey_avoslocker_darkgate_elex_hijackloader_luca-steale.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_d73ae7425eef92dd7c02b0aa2db6f2f0_amadey_avoslocker_darkgate_elex_hijackloader_luca-steale.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_d73ae7425eef92dd7c02b0aa2db6f2f0_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_njrat_rhadamanthys
- Size 1.6MB
- SHA256 1709520fe8847066df1494fbd7bcf866a29b62fd7fc3800309231dce1b3feea5
- MD5 d73ae7425eef92dd7c02b0aa2db6f2f0
- SHA1 7042cd591c890400deff95023019f5a06a3c1d50
- SHA512 9b6e42b28faa192a7cc2466390a7067c629d2f55edc4fc71abe837505bdc7e7e49860e81097c1a1c6b2b567bedc1479ad5fc6aebdb1337091d743ee8857295c9
- SSDEEP 24576:qg8x+aIwBnuDCaGqEpkHGMXNk7DFO8HbkfFVEQa8EBb6pPtfmiuWXW:P8JuOkHGMXNoFO8Hk3Ezb6pPtfqiW
- TLSH T14275181177E95A29F5FB2B31AEB851604A7BBC615F31C7CF13801A5E2934AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE